./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor974460655

<...>
Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts.
execve("./syz-executor974460655", ["./syz-executor974460655"], 0x7ffe77cd0ae0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555658a000
brk(0x55555658ac40)                     = 0x55555658ac40
arch_prctl(ARCH_SET_FS, 0x55555658a300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor974460655", 4096) = 27
brk(0x5555565abc40)                     = 0x5555565abc40
brk(0x5555565ac000)                     = 0x5555565ac000
mprotect(0x7f92e9cde000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/profiling", O_WRONLY) = 3
[   68.023397][ T5065] kernel profiling enabled (shift: 0)
[   68.191019][    C1] ==================================================================
[   68.199106][    C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa8/0xe0
[   68.206322][    C1] Read of size 8 at addr ffffc90003d1f100 by task syz-executor974/5065
[   68.214550][    C1] 
[   68.216879][    C1] CPU: 1 PID: 5065 Comm: syz-executor974 Not tainted 6.2.0-syzkaller-06742-g307e14c03906 #0
[   68.226947][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[   68.237007][    C1] Call Trace:
[   68.240381][    C1]  <IRQ>
[   68.243220][    C1]  dump_stack_lvl+0x1e7/0x2d0
[   68.247916][    C1]  ? nf_tcp_handle_invalid+0x650/0x650
[   68.253374][    C1]  ? panic+0x770/0x770
[   68.257438][    C1]  ? _printk+0xd5/0x120
[   68.261593][    C1]  print_report+0x163/0x4f0
[   68.266100][    C1]  ? __lock_acquire+0x1f80/0x1f80
[   68.271119][    C1]  ? __virt_addr_valid+0xbd/0x2e0
[   68.276147][    C1]  ? profile_pc+0xa8/0xe0
[   68.280475][    C1]  kasan_report+0x13a/0x170
[   68.284979][    C1]  ? profile_pc+0xa8/0xe0
[   68.289313][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   68.295222][    C1]  profile_pc+0xa8/0xe0
[   68.299387][    C1]  profile_tick+0xf2/0x170
[   68.303827][    C1]  tick_sched_timer+0x394/0x550
[   68.308680][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   68.314235][    C1]  __hrtimer_run_queues+0x636/0x1030
[   68.319532][    C1]  ? hrtimer_interrupt+0x980/0x980
[   68.324648][    C1]  ? ktime_get_update_offsets_now+0x40b/0x420
[   68.330710][    C1]  hrtimer_interrupt+0x396/0x980
[   68.335666][    C1]  __sysvec_apic_timer_interrupt+0x19c/0x690
[   68.341644][    C1]  sysvec_apic_timer_interrupt+0x90/0xb0
[   68.347271][    C1]  </IRQ>
[   68.350210][    C1]  <TASK>
[   68.353137][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   68.359119][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   68.365623][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ee fc 27 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b3 53 a4 f6 65 8b 05 34 92 48 75 85 c0 74 3f 48 c7 04 24 0e 36
[   68.385573][    C1] RSP: 0018:ffffc90003d1f100 EFLAGS: 00000206
[   68.391648][    C1] RAX: b8416b4c84951900 RBX: 1ffff920007a3e24 RCX: ffffffff816c1c5a
[   68.399612][    C1] RDX: dffffc0000000000 RSI: ffffffff8aea7c20 RDI: 0000000000000001
[   68.407578][    C1] RBP: ffffc90003d1f190 R08: dffffc0000000000 R09: fffffbfff205a039
[   68.415543][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   68.423523][    C1] R13: 1ffff920007a3e20 R14: ffffc90003d1f120 R15: 0000000000000246
[   68.431501][    C1]  ? mark_lock+0x9a/0x340
[   68.435855][    C1]  ? _raw_spin_unlock+0x40/0x40
[   68.440710][    C1]  ? __mod_zone_page_state+0xda/0x140
[   68.446085][    C1]  __rmqueue_pcplist+0x2231/0x2540
[   68.451303][    C1]  ? zone_watermark_fast+0x240/0x240
[   68.456592][    C1]  get_page_from_freelist+0x870/0x35f0
[   68.462072][    C1]  ? __lock_acquire+0x125b/0x1f80
[   68.467104][    C1]  ? __alloc_pages+0x7f0/0x7f0
[   68.473169][    C1]  ? prepare_alloc_pages+0x1d9/0x5b0
[   68.478469][    C1]  __alloc_pages+0x291/0x7f0
[   68.483074][    C1]  ? zone_statistics+0x170/0x170
[   68.488031][    C1]  ? alloc_pages+0x510/0x780
[   68.492633][    C1]  __get_free_pages+0xc/0x30
[   68.497226][    C1]  kasan_populate_vmalloc_pte+0x2e/0xd0
[   68.502776][    C1]  ? __apply_to_page_range+0x9b3/0xcc0
[   68.508252][    C1]  __apply_to_page_range+0x9c5/0xcc0
[   68.513550][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[   68.518923][    C1]  alloc_vmap_area+0x1c2e/0x1d70
[   68.523860][    C1]  ? vm_map_ram+0xab0/0xab0
[   68.528362][    C1]  __get_vm_area_node+0x16c/0x360
[   68.533383][    C1]  __vmalloc_node_range+0x398/0x1370
[   68.538667][    C1]  ? profile_init+0xfe/0x170
[   68.543254][    C1]  ? zone_statistics+0x170/0x170
[   68.548294][    C1]  ? __alloc_pages+0xbe/0x7f0
[   68.553011][    C1]  ? zone_statistics+0x170/0x170
[   68.558027][    C1]  ? free_vm_area+0x50/0x50
[   68.562544][    C1]  ? profile_init+0xfe/0x170
[   68.567142][    C1]  ? sysfs_kf_read+0x310/0x310
[   68.571932][    C1]  vzalloc+0x79/0x90
[   68.575847][    C1]  ? profile_init+0xfe/0x170
[   68.580434][    C1]  profile_init+0xfe/0x170
[   68.584854][    C1]  profiling_store+0x5e/0xc0
[   68.589461][    C1]  kernfs_fop_write_iter+0x3a6/0x4f0
[   68.594770][    C1]  vfs_write+0x7b2/0xbb0
[   68.599016][    C1]  ? file_end_write+0x250/0x250
[   68.603959][    C1]  ? do_raw_spin_unlock+0x13b/0x8b0
[   68.609156][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[   68.614354][    C1]  ? __fdget_pos+0x265/0x2f0
[   68.618947][    C1]  ksys_write+0x1a0/0x2c0
[   68.623303][    C1]  ? __ia32_sys_read+0x90/0x90
[   68.628076][    C1]  ? syscall_enter_from_user_mode+0x32/0x2c0
[   68.634069][    C1]  ? syscall_enter_from_user_mode+0x8c/0x2c0
[   68.640050][    C1]  do_syscall_64+0x41/0xc0
[   68.644472][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   68.650455][    C1] RIP: 0033:0x7f92e9c71da9
[   68.654866][    C1] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   68.674497][    C1] RSP: 002b:00007ffc96804288 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   68.682994][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92e9c71da9
[   68.690961][    C1] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003
[   68.698958][    C1] RBP: 00007f92e9c35cc0 R08: 0000000000000012 R09: 0000000000000000
[   68.706925][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92e9c35d50
[   68.714975][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   68.722949][    C1]  </TASK>
[   68.725964][    C1] 
[   68.728281][    C1] The buggy address belongs to stack of task syz-executor974/5065
[   68.736085][    C1]  and is located at offset 0 in frame:
[   68.741623][    C1]  _raw_spin_unlock_irqrestore+0x0/0x140
[   68.747308][    C1] 
[   68.749626][    C1] This frame has 1 object:
[   68.754293][    C1]  [32, 40) 'flags.i.i.i.i'
[   68.754304][    C1] 
[   68.761211][    C1] The buggy address belongs to the virtual mapping at
[   68.761211][    C1]  [ffffc90003d18000, ffffc90003d21000) created by:
[   68.761211][    C1]  copy_process+0x5bd/0x3fc0
[   68.778932][    C1] 
[   68.781282][    C1] The buggy address belongs to the physical page:
[   68.787683][    C1] page:ffffea0001d6bcc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75af3
[   68.797827][    C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   68.804971][    C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[   68.813547][    C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[   68.822116][    C1] page dumped because: kasan: bad access detected
[   68.828513][    C1] page_owner tracks the page as allocated
[   68.834224][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 4642, tgid 4642 (dhcpcd), ts 62159591311, free_ts 19964999361
[   68.852888][    C1]  get_page_from_freelist+0x347a/0x35f0
[   68.858433][    C1]  __alloc_pages+0x291/0x7f0
[   68.863016][    C1]  __vmalloc_node_range+0x966/0x1370
[   68.868385][    C1]  dup_task_struct+0x3e5/0x750
[   68.873141][    C1]  copy_process+0x5bd/0x3fc0
[   68.877725][    C1]  kernel_clone+0x22d/0x9b0
[   68.882222][    C1]  __x64_sys_clone+0x235/0x280
[   68.887072][    C1]  do_syscall_64+0x41/0xc0
[   68.891509][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   68.897414][    C1] page last free stack trace:
[   68.902079][    C1]  free_unref_page_prepare+0xf3f/0x1040
[   68.907635][    C1]  free_unref_page+0x37/0x3f0
[   68.912305][    C1]  free_contig_range+0x9e/0x150
[   68.917153][    C1]  destroy_args+0x102/0x9a0
[   68.921676][    C1]  debug_vm_pgtable+0x40a/0x470
[   68.926522][    C1]  do_one_initcall+0x2da/0xa90
[   68.931298][    C1]  do_initcall_level+0x157/0x210
[   68.936258][    C1]  do_initcalls+0x3f/0x80
[   68.940591][    C1]  kernel_init_freeable+0x477/0x630
[   68.945807][    C1]  kernel_init+0x1d/0x2a0
[   68.950130][    C1]  ret_from_fork+0x1f/0x30
[   68.954546][    C1] 
[   68.956861][    C1] Memory state around the buggy address:
[   68.962498][    C1]  ffffc90003d1f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   68.970550][    C1]  ffffc90003d1f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   68.978601][    C1] >ffffc90003d1f100: f1 f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00
[   68.986746][    C1]                    ^
[   68.990803][    C1]  ffffc90003d1f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   68.998867][    C1]  ffffc90003d1f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   69.006919][    C1] ==================================================================
[   69.014998][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   69.022202][    C1] CPU: 1 PID: 5065 Comm: syz-executor974 Not tainted 6.2.0-syzkaller-06742-g307e14c03906 #0
[   69.032630][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[   69.042702][    C1] Call Trace:
[   69.045991][    C1]  <IRQ>
[   69.048831][    C1]  dump_stack_lvl+0x1e7/0x2d0
[   69.053516][    C1]  ? nf_tcp_handle_invalid+0x650/0x650
[   69.059145][    C1]  ? vsnprintf+0x17f/0x1d80
[   69.063645][    C1]  ? panic+0x770/0x770
[   69.067712][    C1]  ? lock_release+0x106/0xab0
[   69.072387][    C1]  ? vscnprintf+0x5d/0x80
[   69.076727][    C1]  panic+0x31c/0x770
[   69.080630][    C1]  ? vprintk_emit+0x10d/0x1f0
[   69.085316][    C1]  ? check_panic_on_warn+0x21/0xa0
[   69.090424][    C1]  ? memcpy_page_flushcache+0x100/0x100
[   69.095971][    C1]  ? do_raw_spin_unlock+0x13b/0x8b0
[   69.101186][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   69.107085][    C1]  ? _raw_spin_unlock+0x40/0x40
[   69.111955][    C1]  check_panic_on_warn+0x82/0xa0
[   69.116893][    C1]  ? profile_pc+0xa8/0xe0
[   69.121223][    C1]  end_report+0xbb/0x170
[   69.125471][    C1]  kasan_report+0x147/0x170
[   69.129988][    C1]  ? profile_pc+0xa8/0xe0
[   69.134319][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[   69.140223][    C1]  profile_pc+0xa8/0xe0
[   69.145689][    C1]  profile_tick+0xf2/0x170
[   69.150114][    C1]  tick_sched_timer+0x394/0x550
[   69.154963][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[   69.160517][    C1]  __hrtimer_run_queues+0x636/0x1030
[   69.165810][    C1]  ? hrtimer_interrupt+0x980/0x980
[   69.170924][    C1]  ? ktime_get_update_offsets_now+0x40b/0x420
[   69.176993][    C1]  hrtimer_interrupt+0x396/0x980
[   69.181942][    C1]  __sysvec_apic_timer_interrupt+0x19c/0x690
[   69.187946][    C1]  sysvec_apic_timer_interrupt+0x90/0xb0
[   69.193575][    C1]  </IRQ>
[   69.196501][    C1]  <TASK>
[   69.199424][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   69.205406][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[   69.211909][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ee fc 27 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b3 53 a4 f6 65 8b 05 34 92 48 75 85 c0 74 3f 48 c7 04 24 0e 36
[   69.231525][    C1] RSP: 0018:ffffc90003d1f100 EFLAGS: 00000206
[   69.237705][    C1] RAX: b8416b4c84951900 RBX: 1ffff920007a3e24 RCX: ffffffff816c1c5a
[   69.245673][    C1] RDX: dffffc0000000000 RSI: ffffffff8aea7c20 RDI: 0000000000000001
[   69.253653][    C1] RBP: ffffc90003d1f190 R08: dffffc0000000000 R09: fffffbfff205a039
[   69.261641][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   69.269605][    C1] R13: 1ffff920007a3e20 R14: ffffc90003d1f120 R15: 0000000000000246
[   69.277572][    C1]  ? mark_lock+0x9a/0x340
[   69.282074][    C1]  ? _raw_spin_unlock+0x40/0x40
[   69.286939][    C1]  ? __mod_zone_page_state+0xda/0x140
[   69.292310][    C1]  __rmqueue_pcplist+0x2231/0x2540
[   69.297432][    C1]  ? zone_watermark_fast+0x240/0x240
[   69.302719][    C1]  get_page_from_freelist+0x870/0x35f0
[   69.308201][    C1]  ? __lock_acquire+0x125b/0x1f80
[   69.313234][    C1]  ? __alloc_pages+0x7f0/0x7f0
[   69.318024][    C1]  ? prepare_alloc_pages+0x1d9/0x5b0
[   69.323341][    C1]  __alloc_pages+0x291/0x7f0
[   69.327964][    C1]  ? zone_statistics+0x170/0x170
[   69.332915][    C1]  ? alloc_pages+0x510/0x780
[   69.337522][    C1]  __get_free_pages+0xc/0x30
[   69.342130][    C1]  kasan_populate_vmalloc_pte+0x2e/0xd0
[   69.347688][    C1]  ? __apply_to_page_range+0x9b3/0xcc0
[   69.353149][    C1]  __apply_to_page_range+0x9c5/0xcc0
[   69.358462][    C1]  ? kasan_populate_vmalloc+0x70/0x70
[   69.363839][    C1]  alloc_vmap_area+0x1c2e/0x1d70
[   69.368789][    C1]  ? vm_map_ram+0xab0/0xab0
[   69.373291][    C1]  __get_vm_area_node+0x16c/0x360
[   69.378315][    C1]  __vmalloc_node_range+0x398/0x1370
[   69.383592][    C1]  ? profile_init+0xfe/0x170
[   69.388267][    C1]  ? zone_statistics+0x170/0x170
[   69.393313][    C1]  ? __alloc_pages+0xbe/0x7f0
[   69.398004][    C1]  ? zone_statistics+0x170/0x170
[   69.402955][    C1]  ? free_vm_area+0x50/0x50
[   69.407465][    C1]  ? profile_init+0xfe/0x170
[   69.412085][    C1]  ? sysfs_kf_read+0x310/0x310
[   69.416859][    C1]  vzalloc+0x79/0x90
[   69.420851][    C1]  ? profile_init+0xfe/0x170
[   69.425441][    C1]  profile_init+0xfe/0x170
[   69.429901][    C1]  profiling_store+0x5e/0xc0
[   69.434503][    C1]  kernfs_fop_write_iter+0x3a6/0x4f0
[   69.439802][    C1]  vfs_write+0x7b2/0xbb0
[   69.444137][    C1]  ? file_end_write+0x250/0x250
[   69.449072][    C1]  ? do_raw_spin_unlock+0x13b/0x8b0
[   69.454366][    C1]  ? lockdep_hardirqs_on+0x98/0x140
[   69.459565][    C1]  ? __fdget_pos+0x265/0x2f0
[   69.464251][    C1]  ksys_write+0x1a0/0x2c0
[   69.468598][    C1]  ? __ia32_sys_read+0x90/0x90
[   69.473373][    C1]  ? syscall_enter_from_user_mode+0x32/0x2c0
[   69.479367][    C1]  ? syscall_enter_from_user_mode+0x8c/0x2c0
[   69.485352][    C1]  do_syscall_64+0x41/0xc0
[   69.489867][    C1]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   69.495766][    C1] RIP: 0033:0x7f92e9c71da9
[   69.500189][    C1] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   69.520152][    C1] RSP: 002b:00007ffc96804288 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   69.528588][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f92e9c71da9
[   69.536587][    C1] RDX: 0000000000000012 RSI: 0000000020000380 RDI: 0000000000000003
[   69.544577][    C1] RBP: 00007f92e9c35cc0 R08: 0000000000000012 R09: 0000000000000000
[   69.552548][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92e9c35d50
[   69.560530][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   69.568525][    C1]  </TASK>
[   69.571771][    C1] Kernel Offset: disabled
[   69.576228][    C1] Rebooting in 86400 seconds..